Description

Cyber Security Engineer in IRIS² Integrated Programme Team in Secure Connectivity Programme Department in the Directorate of Connectivity and Secure Communications.

On 15 March 2023, the European Parliament and the Council of the European Union adopted Regulation (EU) 2023/588 establishing the Union Secure Connectivity Programme for the period 2023–2027.
The objective of the EU Secure Connectivity Programme is to deploy an EU satellite constellation, IRIS² (Infrastructure for Resilience, Interconnectivity and Security by Satellite). The Programme will provide an EU satellite-based, multiorbital communication infrastructure for governmental use while integrating and complementing existing and future national and European capacities in the framework of the GOVSATCOM component of the EU Space Programme.
The ESA Programme Related to EU Secure Connectivity is intended to support the effective development and validation of the EU Secure Connectivity (IRIS²) governmental infrastructure, which is to be developed, deployed and operated under a concession contract signed by the EU with a private consortium, and the services provided by it, as well as the validation and demonstration of services based on the commercial infrastructure developed by the contractors delivering the EU Secure Connectivity governmental infrastructure.

The European Commission and ESA will set up an Integrated Programme Team (IPT) to manage the EU IRIS² Programme and, in particular, the related concession contract, and to ensure close coordination between all activities relating to IRIS².

Reporting functionally to the Security Manager of the Integrated Programme Team and hierarchically to the Head of the ESA CSC Security Office, you will be responsible for all system security aspects, ensuring proper engineering implementation of the General Security Requirements of the governmental infrastructure, including the definition and planning of relevant R&D activities. You will liaise with ESA, aiming to ensure coordination in accordance with the agreements between ESA and the European Commission.

Initial assignment to Brussels is until Q1 2028 with a possible extension, within the framework of the 12 year Contribution Agreement between ESA and EC. At the end of the assignment, you will be reassigned to a position within CSC Directorate.

Duties

Your tasks and responsibilities will include:

• supporting the IRIS² Security Manager to supervise the uniform and correct implementation of the applicable General Security Requirements (GSR), and in particular the cyber security requirements in the IRIS² programme;
• ensuring proper implementation of the GSR Cyber Security Requirements in the infrastructure versions, including patching policy and hardening guidelines;
• interfacing with industry on matters relating to system security aspects under the IRIS² concession;
• interfacing with the various ESA Secure Connectivity programme offices and the ESA Security Office for the supervision of industrial activities relating to the definition of the security architecture of the system in accordance with the agreements between ESA and the European Commission;
• supporting the planning and execution of the cyber audits to ensure that the systems are protected and controlled and providing support during the physical audits performed at contractors’ facilities;
• following up penetration tests carried out by contractors or as part of the project;
• providing support during the analysis of the cyber security risks relating to the supply chain;
• supporting the IRIS² Security Manager in the cyber decision-making process regarding the implementation of cyber corrections, mitigations, security monitoring and risk management;
• working with the CIA (Cyber Internal Auditor) to minimise the risks relating to the audit;
• liaising regularly with the ESA Security Office to implement homogeneous security engineering processes;
• defining the security aspects of the design of the next generation of the governmental infrastructure, including the definition and planning of relevant R&D activities, such as system studies and technology development, at all levels.

Technical competencies

Behavioural competencies

Result Orientation 
Operational Efficiency 
Fostering Cooperation 
Relationship Management 
Continuous Improvement 
Forward Thinking

Education

A master's degree in engineering is required for this post.

Additional requirements

• You should have substantial security or audit experience.
• You are expected to have a very strong background in cyber security, policy and the associated standards and regulations.
• You should demonstrate excellent organisational skills and a high level of competency in stakeholder management.
• You must possess good judgement and integrity and be willing to travel.